id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
7402	webkitgtk-2.10.6	Fernando de Oliveira	Fernando de Oliveira	" == WebKitGTK+ Security Advisory WSA-2016-0001 ==

'''CVE-2015-7096 and CVE-2015-7098'''

[https://lists.webkit.org/pipermail/webkit-gtk/2016-February/002610.html]

See comment:4, below.

[http://webkitgtk.org/releases/webkitgtk-2.10.6.tar.xz]

[http://webkitgtk.org/releases/webkitgtk-2.10.6.tar.xz.sha1.asc]

[https://lists.webkit.org/pipermail/webkit-gtk/2016-January/002521.html]

   md5sum: 50c52ffc0069ba2376101b5d211226fb

Left the ''Requirements'' session, below, for convenience.

{{{
[webkit-gtk] WebKitGTK+ 2.10.6 released!
Carlos Garcia Campos cgarcia at igalia.com
Wed Jan 27 06:33:19 PST 2016

This is a bug fix release in the stable 2.10 series.

What's new in the WebKitGTK+ 2.10.6 release?
============================================

  - Fix a deadlock in the Web Process when JavaScript garbage collector
    was running for a web worker thread that made google maps to hang.
  - Fix media controls displaying without controls attribute.
  - Fix a Web Process crash when quickly attempting many DnD operations.

Requirements
============

gtk+ >= 3.6.0
glib >= 2.36
libsoup >= 2.42.0
cairo >= 1.10.2
libxml >= 2.8.0
libxslt >= 1.1.7
HarfBuzz >= 0.9.2
icu
fontconfig >= 2.8.0
FreeType2 >= 2.4.2
libsecret
SQLite
enchant

Depending on your configuration options WebKitGTK+ may also depend on:

gtk+ >= 2.24.10
GObject introspection
gstreamer >= 1.0.3
GeoClue >= 2.1.5
gudev
cairo-gl >= 1.10.2

...

The WebKitGTK+ team,
January 27, 2016
-- 
Carlos Garcia Campos
...
}}}"	enhancement	closed	high	7.9	BOOK	SVN	medium	fixed